$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: 4llSsyWSgFiI42Sua4w4CQxNPYhLu1hoQcsJKA8gFJ8= Subject key identifier: 20:9B:8D:F5:AD:1D:BD:04:B6:AA:AC:F3:34:E2:94:E7:FE:11:7E:F3 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 0196BC6E546E56FF777B3BB5DA36263F0C78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 1540 Signing time: Sat 10 May 2025 23:01:09 +0000 Manifest this update: Sat 10 May 2025 23:01:09 +0000 Manifest next update: Sun 11 May 2025 23:01:09 +0000 Files and hashes: 1: 0GQGYjFgeoe90j-QzubD6mrcJkk.roa (hash: cASoDwOCqQQo3HckgWr9Fm6RrFpE5g5vgsJJsPTF9PI=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: gn/2/aIl+X/mWQNHjcBwDJs/78H+OJWA1l6oX+eeo2I=) 3: 5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa (hash: +Wt4CaG2KBebUdy7DTYqNM4+qA+qSGjkIL8Uj7jYbKY=) 4: LkZMbp2aUa0yXxOxLWaqN5AS52o.roa (hash: o8vH7FtM5V/qTZoiT6aAxSseM4Yg902eHtLadTVcAzY=) 5: N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa (hash: /XNE593x81Nv5d88KdthJ5cf11PusTGT9f+nPTiwsmQ=) 6: O2VeVpIY0NqqJs4saKQoTuFoA6I.roa (hash: eCU07QC/oP0X/AS+uAyqKGOShTlcgaS/MZcj5EXt1FQ=) 7: PmeI5MIhQ4wxSrPUPOIOQ9Ubvnk.roa (hash: W6jZRl9BSEjjkm486LLqed9ed+xxHLYMlqc3sRgCALQ=) 8: QJVbOLfuQimwnt2csTkB91gXkec.roa (hash: GkGvp1WsMKLXrnxKgO0ikQrOP7Rki9hxYkm+S7LbAS8=) 9: RTN7ctApkTYd2Og2JaBeJOrSDKw.roa (hash: PECp9vVhGIOoiVTK3bRnzPU+NWZIUXb57SnIExeKGko=) 10: ZFUmkI5Si20CHGaDBK-ZoNXIfEk.roa (hash: 4y56G8cf16t1jWavTqKOCy9B29Mw+jTHj1dGwOZOhA0=) 11: _28X1lMsvBxqScVY5HiVqqNdE4o.roa (hash: 1zLcZ1CwGAvvzQsYCPPfZSZE3xWE9xsMdQ0aDUZbc8g=) 12: cdmQ2_ODlCp8h7SlTaorYnidAuk.roa (hash: +IC730dtvUCM5X3ceJwMJA3N6qWFyePDz8c3aKLMcqE=) 13: gWN0YMhA97UPOTqYvOMM9zaPWRs.roa (hash: Hm5lPWw7bUXDdTOs1pfp1fHbk/bNa8PnxIySi1lfXPs=) 14: iY_9p9rfYCrq76s6mH8iLmqZ8G4.roa (hash: WZh8CFIJ4XBLsbT8NvOnixg7Xgopb12vdZ21KTVanqQ=) 15: jTMPeohgGOxcMFZVU8z0ehshce0.roa (hash: SyL8iMLhykQz8ANtvdKfK1EugykUZcu24olhfWQesXo=) 16: n7V7OXaDS-XvJc4UQc5MPqTFYmY.roa (hash: 0QBDYhcEfGTqjEJgSs+TOY3XMDZsBCVa117v4v2Y4iI=) 17: uEsfVd8NIzUxBoG774jECjWdTsY.roa (hash: lAehouSKcnB2amZVq4TUPtcrTxH5jfwC6dVK0vZrRgI=) 18: vlDfC43FHcefunPJngYR1WAZ7rA.roa (hash: az+OZ3tRKu13gj7aBFAWboRwowS41+dYdps7euT4uWg=) 19: w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa (hash: cKSU2IKqf8A5+vV8g8UVVjc9ie4gyRlLREV+QT0zjV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bc:6e:54:6e:56:ff:77:7b:3b:b5:da:36:26:3f:0c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: May 10 23:01:09 2025 GMT Not After : May 11 23:01:09 2025 GMT Subject: CN=209b8df5ad1dbd04b6aaacf334e294e7fe117ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6f:d4:e2:8f:c4:04:9e:9e:48:38:82:2a:a6: 59:c9:59:0f:71:c6:9d:82:a5:a4:4f:c9:b4:e5:36: d3:e5:f0:6c:d6:1e:30:1e:8d:26:db:1f:fe:16:15: e6:b1:b9:84:ce:4d:1c:16:2f:b3:41:dd:b5:57:52: 0a:0d:86:98:c3:60:8c:70:37:c9:01:18:37:9d:0c: b7:d0:60:83:a2:bf:bc:10:e4:2c:a9:cd:f4:83:a7: 09:54:e4:91:d9:dc:08:f4:fc:3f:17:6b:4f:ad:37: 66:a6:87:22:1e:05:54:d1:c6:d8:c7:b2:8d:c2:b1: 27:c9:5c:09:3d:de:97:61:0a:61:83:93:84:62:79: dd:67:bf:0b:12:67:ce:b2:20:4f:9c:56:14:f5:fe: 49:15:39:e6:4a:ec:e7:3d:89:2e:8a:31:b1:9b:a2: b4:c8:82:63:ed:76:09:58:01:68:6d:d0:9e:41:fc: 61:f5:4b:9b:82:d8:5c:d7:2f:da:94:26:69:26:18: 84:ed:4d:b7:73:63:58:de:ae:4f:7e:26:a7:cf:68: 26:c5:df:5b:72:b5:80:4f:cf:45:d3:0a:51:e4:e3: 38:4d:19:da:c0:7f:45:6f:ca:8b:8b:97:65:23:a4: 9f:6f:e0:e5:f8:83:24:ba:90:18:66:39:5f:60:47: a3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9B:8D:F5:AD:1D:BD:04:B6:AA:AC:F3:34:E2:94:E7:FE:11:7E:F3 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:63:c4:f8:76:ac:0c:ed:18:d7:be:0c:9c:01:ce:72:01:f3: 6a:b5:65:b7:05:27:3c:56:13:e9:e6:45:62:b2:2b:67:19:52: 29:70:c9:60:ac:83:64:69:c4:cf:c9:62:f2:a5:a3:9b:3f:98: 22:dd:90:e3:b0:6d:f6:c6:a2:56:b8:57:02:ca:cc:b7:80:b3: 5c:dc:3f:8f:e9:60:db:3b:1f:06:22:ca:a9:6d:bc:10:f7:7f: 86:74:d9:d0:fe:c4:bf:8a:4c:21:f1:0e:e8:89:97:4a:b6:8d: 08:52:4a:a7:d3:50:41:e5:bc:8f:29:a3:4e:ee:dc:b1:0b:ed: 8b:3a:07:14:d9:84:f8:8c:4e:03:36:a0:e4:89:68:fa:7c:63: 35:b9:76:6f:1e:e3:92:a9:f1:cd:22:c2:2e:31:b2:37:c4:0a: 1f:ba:cb:b1:6d:e4:a7:1c:68:9c:23:10:68:97:e2:4c:18:03: 45:dd:f9:40:1c:21:a0:48:10:b8:2e:65:22:d4:5e:f1:08:83: 0b:01:48:f2:05:6a:00:65:b9:19:55:6d:10:5e:e0:89:e2:5e: a3:2b:a7:18:d1:36:b7:f3:82:48:0d:b8:cf:44:96:2b:8c:62: 47:38:3a:db:8e:23:e4:f5:3e:05:89:ad:64:8f:cd:0f:cf:d7: 37:a2:3a:58 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZa8blRuVv93ezu12jYmPwx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjUwNTEwMjMwMTA5WhcNMjUwNTExMjMwMTA5WjAzMTEwLwYDVQQD EygyMDliOGRmNWFkMWRiZDA0YjZhYWFjZjMzNGUyOTRlN2ZlMTE3ZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G/U4o/EBJ6eSDiCKqZZyVkPccad gqWkT8m05TbT5fBs1h4wHo0m2x/+FhXmsbmEzk0cFi+zQd21V1IKDYaYw2CMcDfJ ARg3nQy30GCDor+8EOQsqc30g6cJVOSR2dwI9Pw/F2tPrTdmpociHgVU0cbYx7KN wrEnyVwJPd6XYQphg5OEYnndZ78LEmfOsiBPnFYU9f5JFTnmSuznPYkuijGxm6K0 yIJj7XYJWAFobdCeQfxh9Uubgthc1y/alCZpJhiE7U23c2NY3q5Pfianz2gmxd9b crWAT89F0wpR5OM4TRnawH9Fb8qLi5dlI6Sfb+Dl+IMkupAYZjlfYEej0QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCCbjfWtHb0Etqqs8zTilOf+EX7zMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWPE +HasDO0Y174MnAHOcgHzarVltwUnPFYT6eZFYrIrZxlSKXDJYKyDZGnEz8li8qWj mz+YIt2Q47Bt9saiVrhXAsrMt4CzXNw/j+lg2zsfBiLKqW28EPd/hnTZ0P7Ev4pM IfEO6ImXSraNCFJKp9NQQeW8jymjTu7csQvtizoHFNmE+IxOAzag5Ilo+nxjNbl2 bx7jkqnxzSLCLjGyN8QKH7rLsW3kpxxonCMQaJfiTBgDRd35QBwhoEgQuC5lItRe 8QiDCwFI8gVqAGW5GVVtEF7gieJeoyunGNE2t/OCSA24z0SWK4xiRzg6244j5PU+ BYmtZI/ND8/XN6I6WA== -----END CERTIFICATE-----Generated at Sun May 11 01:05:38 2025 by rpki-client